Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZC0X-Uu_wRCDtzC-H7gBTlVc_F8.roa
File: ZC0X-Uu_wRCDtzC-H7gBTlVc_F8.roa (raw, json)
Hash identifier: 7eqMZh6pUt/dwbcBwkgaaufqsbkQRePf1Xjmz+0e+CY=
Subject key identifier: 64:2D:17:F9:4B:BF:C1:10:83:B7:30:BE:1F:B8:01:4E:55:5C:FC:5F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D8F4FBC87A0CB33EA9AAAD8EDE80B6469
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZC0X-Uu_wRCDtzC-H7gBTlVc_F8.roa
Signing time: Wed 15 Apr 2026 04:04:20 +0000
ROA not before: Wed 15 Apr 2026 04:04:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201039
IP address blocks: 5.231.252.0/24 maxlen: 24
89.106.83.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:4f:bc:87:a0:cb:33:ea:9a:aa:d8:ed:e8:0b:64:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 15 04:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=642d17f94bbfc11083b730be1fb8014e555cfc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:38:86:07:57:51:7e:b4:37:16:56:e5:61:
d0:4b:3e:3c:f7:16:04:b5:44:30:b0:7e:ab:68:49:
40:35:57:e8:c4:f1:19:38:4e:99:3d:3c:53:91:23:
ca:d6:b3:29:da:03:2e:80:bb:aa:29:57:12:f1:4b:
48:19:34:0b:b4:9a:4e:6f:a9:cd:af:1e:48:97:0e:
b8:e2:da:38:f0:22:2e:f4:ca:de:d8:dc:8f:34:14:
ff:37:61:f0:06:dd:58:2a:75:21:e9:9b:1a:ef:a8:
64:dd:55:1b:3a:ff:3e:23:8b:32:0f:a4:a2:a0:ef:
28:f4:96:7a:4b:33:e8:7c:a8:f6:02:15:8e:0d:8f:
b9:a9:a5:6d:96:24:99:49:95:ea:56:60:85:f8:35:
95:bd:3d:40:b5:74:d4:76:e9:db:26:c1:97:f6:6d:
d7:8d:22:c5:61:ca:2a:8d:53:4a:7f:28:4c:ec:17:
82:1b:c5:3c:0f:f4:e6:a1:2c:81:57:c0:17:88:b8:
c6:ff:40:8f:cc:b7:e3:20:fc:f6:7c:a1:64:94:84:
ea:13:41:5f:0d:7e:c4:13:89:5a:b2:32:4a:cb:b8:
9a:09:28:80:e2:f6:e8:63:18:f1:9d:06:12:f1:b6:
48:79:51:90:36:ea:51:89:08:35:b9:3d:ae:d6:6d:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2D:17:F9:4B:BF:C1:10:83:B7:30:BE:1F:B8:01:4E:55:5C:FC:5F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZC0X-Uu_wRCDtzC-H7gBTlVc_F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.252.0/24
89.106.83.0/24
89.106.95.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6d:2c:94:e5:0a:4e:4d:53:31:41:db:a5:23:56:51:0b:b2:
23:4f:86:f7:f5:7e:f7:bd:a7:32:b5:58:e1:7d:45:dd:4f:64:
9a:58:db:65:bc:e3:d4:d4:30:19:73:3c:c3:5b:3a:fe:17:4a:
7c:24:a3:24:01:fb:8b:50:42:ef:a3:fd:34:02:9e:d6:42:a3:
91:93:56:c5:97:61:79:87:25:f8:c1:90:0f:97:41:41:6f:4e:
95:57:20:9d:6b:3f:77:3c:9f:14:76:cb:b9:78:97:9d:a0:1a:
4e:54:42:a2:d1:72:79:91:06:91:04:5e:10:a3:d7:09:78:2d:
d1:5f:56:d7:b9:7e:71:76:e2:38:8f:1b:57:f3:b4:2f:25:b8:
14:b9:1c:9b:82:f9:3a:e4:87:88:f2:ab:8e:d0:cf:8f:3c:e1:
65:40:50:d8:2b:20:ca:57:76:71:52:0f:d4:a9:f1:e9:a3:49:
a9:89:7f:a1:2c:47:c5:f1:a2:84:d0:7d:49:52:87:f6:c3:ab:
05:d8:f0:2b:95:a3:0e:0f:96:90:79:18:9d:b7:40:28:0b:83:
90:fd:18:fb:1a:32:d0:1b:fb:1f:0a:d1:28:6d:ff:4c:69:5b:
23:9e:b2:a3:d5:fc:dc:8a:0a:92:d0:77:05:90:89:4e:6c:fd:
6d:b3:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:09 2026 by rpki-client